Extracted

• • Target

    f3e2ecba558b208c2633fb19bebe8a17355442e0a411fc0301e93dc1a149fee8

  • Size

    64KB

  • MD5

    0f98cdc922f9ceda2ecf56d2fcc33197

  • SHA1

    a0f33e272112fd13769c131c6bd2de93a78ad9cb

  • SHA256

    f3e2ecba558b208c2633fb19bebe8a17355442e0a411fc0301e93dc1a149fee8

  • SHA512

    e4b98bfab0d0ba43d998dbd338111cfd89f0ab8fdf2282e1f696094de07bd7d4bb5c633da4f05e3b444d86bbd7b29857bd75824c668eeb9193cf8ba25b010faf

  • SSDEEP

    1536:fpIGJvHOhoDa8waTwYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYYqYYTYYYYYYYYTo:RIGJO+WRaTwYYYYYYYYYYYYYYYYYYYYO

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops file in System32 directory

  behavioral1behavioral2